Here's the situation that I am seeing.
The server's configuration is set to use IMP to authenticate the session.
If I go to https://server/horde and log on to this page ( as opposed to
browsing to https://server/horde/imp ) I can select "Logout" then use the
back button, and read mail, open my inbox, open the calendar...
This problem doesn't seem to occur if I start at https://server/horde/imp .
So, is there a way to force users to start at imp?
I have tried this with both shm and sql sessions management.
I don't think that this has been reported previously.